Phreaker's Phunhouse Courtesy of Exodus 


The long awaited prequil to Phreaker's Guide has finally arrived. 
Conceived from the boredom and loneliness that could only be derived from: 
The Traveler! But now, he has returned in full strength (after a small 
vacation) and is here to ‘World Premiere' the new files everywhere. Stay 
cool. This is the prequil to the first one, so just relax. This is not made 
to be an exclusive ultra elite file, so kinda calm down and watch in the 
background if you are too cool for it. 


/-/  Phreak Dictionary /-/ 


Here you will find some of the basic but necessary terms that should be 
known by any phreak who wants to be respected at all. 


Phreak : 1. The action of using mischevious and mostly illegal 
ways in order to not pay for some sort of tele- 
communications bill, order, transfer, or other service. 
It often involves usage of highly illegal boxes and 
machines in order to defeat the security that is set 
up to avoid this sort of happening. [fr'eaking]. v. 


2. A person who uses the above methods of destruction and 
chaos in order to make a better life for all. A true 
phreaker will not not go against his fellows or narc 
on people who have ragged on him or do anything 
termed to be dishonorable to phreaks. [fr'eek]. n. 


3. A certain code or dialup useful in the action of 
being a phreak. (Example: "I hacked a new metro 
phreak Last night.") 


Switching System: 1. There are 3 main switching systems currently employed 
in the US, and a few other systems will be mentioned 
as background. 


A) SxS: This system was invented in 1918 and was 
employed in over half of the country until 1978. It 
is a very basic system that is a general waste of 
energy and hard work on the linesman. A good way to 
identify this is that it requires a coin in the phone 
booth before it will give you a dial tone, or that no 
call waiting, call forwarding, or any other such 
service is available. Stands for: Step by Step 


B) XB: This switching system was first employed in 1978 
in order to take care of most of the faults of SxS 
switching. Not only is it more efficient, but it 
also can support different services in various forms. 
XB1 is Crossbar Version 1. That is very limited and 
is hard to distinguish from SxS except by direct view 
of the wiring involved. Next up was XB4, Crossbar 
Version 4. With this system, some of the basic things 
like DTMF that were not available with SxS can be 
accomplished. For the final stroke of XB, XB5 was 
created. This is a service that can allow DTMF plus 
most 800 type services (which were not always 
available.) Stands for: Crossbar. 


C) ESS: A nightmare in telecom. In vivid color, ESS is 
a pretty bad thing to have to stand up to. It is 


quite simple to identify. Dialing 911 for emergencies, 
and ANI [see ANI below] are the most common facets of 
the dread system. ESS has the capability to list ina 
person's caller log what number was called, how long 
the call took, and even the status of the conversation 
(modem or otherwise.) Since ESS has been employed, 
which has been very recently, it has gone through 
many kinds of revisions. The latest system to date is 
ESS lla, that is employed in Washington D.C. for 
security reasons. ESS is truly trouble for any 
phreak, because it is 'smarter' than the other 
systems. For instance, if on your caller log they saw 
50 calls to 1-800-421-9438, they would be able to do 
a CN/A [see Loopholes below] on your number and 
determine whether you are subscribed to that service 
or not. This makes most calls a hazard, because 
although 800 numbers appear to be free, they are 
recorded on your caller log and then right before you 
receive your bill it deletes the billings for them. 
But before that the are open to inspection, which is 
one reason why extended use of any code is dangerous 
under ESS. Some of the boxes [see Boxing below] are 
unable to function in ESS. It is generally a menace 
to the true phreak. Stands For: Electronic Switching 
System. Because they could appear on a filter 
somewhere or maybe it is just nice to know them 
anyways. 


A) SSS: Strowger Switching System. First 
non-operator system available. 


B) WES: Western Electronics Switching. Used about 40 
years ago with some minor places out west. 


Boxing: 1) The use of personally designed boxes that emit or 
cancel electronical impulses that allow simpler 
acting while phreaking. Through the use of separate 
boxes, you can accomplish most feats possible with 
or without the control of an operator. 


2) Some boxes and their functions are listed below. 
Ones marked with '*' indicate that they are not 
operatable in ESS. 


*Black Box: Makes it seem to the phone company that 
the phone was never picked up. 

Blue Box : Emits a 2600hz tone that allows you to do 
such things as stack a trunk line, kick 
the operator off line, and others. 

Red Box : Simulates the noise of a quarter, nickel, 
or dime being dropped into a payphone. 
Cheese Box : Turns your home phone into a pay phone to 
throw off traces (a red box is usually 
needed in order to call out.) 
*Clear Box : Gives you a dial tone on some of the old 
SxS payphones without putting in a coin. 

Beige Box : A simpler produced linesman's handset that 
allows you to tap into phone lines and 
extract by eavesdropping, or crossing 
wires, etc. 

Purple Box : Makes all calls made out from your house 
seem to be local calls. 


ANI [ANI]: 1) 


Dialups [dy'l'ups]: 1) 


Automatic Number Identification. A service 

available on ESS that allows a phone service [see 
Dialups below] to record the number that any certain 
code was dialed from along with the number that was 
called and print both of these on the customer bill. 
950 dialups [see Dialups below] are all designed 
just to use ANI. Some of the services do not have 
the proper equipment to read the ANI impulses yet, 
but it is impossible to see which is which without 
being busted or not busted first. 


Any local or 800 extended outlet that allows instant 
access to any service such as MCI, Sprint, or AT&T 
that from there can be used by handpicking or using 
a program to reveal other peoples codes which can 
then be used moderately until they find out about 

it and you must switch to another code (preferrably 
before they find out about it.) 


Dialups are extremely common on both senses. Some 
dialups reveal the company that operates them as 
soon as you hear the tone. Others are much harder 
and some you may never be able to identify. A small 
list of dialups: 


1-800-421-9438 (5 digit codes) 
1-800-547-6754 (6 digit codes) 

1-800-345-0008 (6 digit codes) 

1-800-734-3478 (6 digit codes) 

1-800-222-2255 (5 digit codes) 

Codes: Codes are very easily accessed procedures 
when you call a dialup. They will give you some sort 
of tone. If the tone does not end in 3 seconds, 
then punch in the code and immediately following the 
code, the number you are dialing but strike the 

'1' in the beginning out first. If the tone does 
end, then punch in the code when the tone ends. 
Then, it will give you another tone. Punch in the 
number you are dialing, or a '9'. If you punch in 

a '9' and the tone stops, then you messed up a 
little. If you punch in a tone and the tone 
continues, then simply dial then number you are 
calling without the '1'. 


All codes are not universal. The only type that I 
know of that is truly universal is Metrophone. 
Almost every major city has a local Metro dialup 
(for Philadelphia, (215)351-0100/0126) and since the 
codes are universal, almost every phreak has used 
them once or twice. They do not employ ANI in any 
outlets that I know of, so feel free to check 
through your books and call 555-1212 or, as a more 
devious manor, subscribe yourself. Then, never use 
your own code. That way, if they check up on you due 
to your caller log, they can usually find out that 
you are subscribed. Not only that but you could set 
a phreak hacker around that area and just let it 
hack away, since they usually group them, and, as a 
bonus, you will have their local dialup. 


5) 950's. They seem like a perfectly cool phreakers 
dream. They are free from your house, from payphones, 
from everywhere, and they host all of the major long 
distance companies (950)1044 <MCI>, 950)1077 
<Sprint>, 950-1088 <S+ylines>, 950-1033 <Us 
Telecom>.) Well, they aren't. They were designed for 
ANI. That is the point, end of discussion. 


A phreak dictionary. If you remember all of the things contained on 
that fileup there, you may have a better chance of doing whatever it is you 
do. This next section is maybe a little more interesting... 


Blue Box Plans: 


These are some blue box plans, but first, be warned, there have been 
2600hz tone detectors out on operator trunk lines since XB4. The idea behind 
it is to use a 2600hz tone for a few very naughty functions that can really 
make your day lighten up. But first, here are the plans, or the heart of the 
file: 


700 1 2 4 7 11 
900 : + 3 5 8 12 
1100 : + + 6 9 KP 
1300 : + + + 10 KP2 
1500 : + ; + : + : + : ST 

: 700 : 900 :1100 :1300 1500 


Stop! Before you diehard users start piecing those little tone tidbits 
together, there is a simpler method. If you have an Apple-Cat with a 
program like Cat's Meow IV, then you can generate the necessary tones, the 
2600hz tone, the KP tone, the KP2 tone, and the ST tone through the dial 
section. So if you have that I will assume you can boot it up and it works, 
and I'll do you the favor of telling you and the other users what to do with 
the blue box now that you have somehow constructed it. The connection to an 
Operator is one of the most well known and used ways of having fun with your 
blue box. You simply dial a TSPS (Traffic Service Positioning Station, or 
the operator you get when you dial '0') and blow a 2600hz tone through the 
line. Watch out! Do not dial this direct! After you have done that, it is 
quite simple to have fun with it. Blow a KP tone to start a call, a ST tone 
to stop it, and a 2600hz tone to hang up. Once you have connected to it, 
here are some fun numbers to call with it: 


0-700-456-1000 Teleconference (free, because you are the operator!) 
(Area code)-101 Toll Switching 

(Area code)-121 Local Operator (hehe) 

(Area code)-131 Information 

(Area code)-141 Rate & Route 

(Area code)-181 Coin Refund Operator 

(Area code)-11511 Conference operator (when you dial 800-544-6363) 


Well, those were the tone matrix controllers for the blue box and some 
other helpful stuff to help you to start out with. But those are only the 
functions with the operator. There are other k-fun things you can do with it. 


More advanced Blue Box Stuff: 


Oops. Small mistake up there. I forgot tone lengths. Um, you blow a 
tone pair out for up to 1/10 of a second with another 1/10 second for silence 
between the digits. KP tones should be sent for 2/10 of a second. One way to 
confuse the 2600hz traps is to send pink noise over the channel (for all of 
you that have decent BSR equalizers, there is major pink noise in there.) 


Using the operator functions is the use of the ‘inward' trunk line. 
Thatis working it from the inside. From the ‘outward' trunk, you can do such 
things as make emergency breakthrough calls, tap into lines, busy all of the 
lines in any trunk (called 'stacking'), enable or disable the TSPS's, and 
for some 4a systems you can even re-route calls to anywhere. 


All right. The one thing that every complete phreak guide should be 
without is blue box plans, since they were once a vital part of phreaking. 
Another thing that every complete file needs is a complete listing of all of 
the 800 numbers around so you can have some more Fu7nC# 

/-/ 800 Dialup Listings /-/ 


1-800-345-0008 
1-800-245-4890 
1-800-526-5305 


( 1-800-547-6754 

( 

( 
1-800-437-9895 ( 

( 

( 


( 
1-800-327-9136 ( 
1-800-858-9000 ( 
1-800-245-7508 ( 

1-800-343-1844 ( 
1-800-437-3478 ( 


1-800-322-1415 


6 
4 
8 
7 
4 
6 1-800-325-7222 


6 
4 
3 
5 
6 
6 
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All right, set Cat Hacker 1.0 on those numbers and have a fuck of a 
day. That is enough with 800 codes, by the time this gets around to you I 
dunno what state those codes will be in, but try them all out anyways and 
see what you get. On some 800 services now, they have an operator who will 
answer and ask you for your code, and then your name. Some will switch back 
and forth between voice and tone verification, you can never be quite sure 
which you will be upagainst. 


Armed with this knowledge you should be having a pretty good time 
phreaking now. But class isn't over yet, there are still a couple important 
rules that you should know. If you hear continual clicking on the line, then 
you should assume that an operator is messing with something, maybe even 
Listening in on you. It is a good idea to call someone back when the phone 
starts doing that. If you were using a code, use a different code and/or 
service to call him back. 


A good way to detect if a code has gone bad or not is to listen when 
the number has been dialed. If the code is bad you will probably hear the 
phone ringing more clearly and more quickly than if you were using a 
different code. If someone answers voice to it then you can immediately 
assume that it is an operative for whatever company you are using. The famed 
'311311' code for Metro is one of those. You would have to be quite stupid 
to actually respond, because whoever you ask for the operator will always 
say ‘He's not in right now, can I have him call you back?' and then they 
will ask for your name and phone number. Some of the more sophisticated 
companies will actually give you a carrier on a line that is supposed to 
give you a carrier and then just have garbage flow across the screen like it 
would with a bad connection. That is a feeble effort to make you think that 
the code is still working and maybe get you to dial someone's voice, a good 
test for the carrier trick is to dial anumber that will give you a carrier 
that you have never dialed with that code before, that will allow you to 
determine whether the code is good or not. For our next section, a lighter 
look at some of the things that a phreak should not be without. A vocabulary. 
A few months ago, it was a quite strange world for the modem people out 
there. But now, a phreaker's vocabulary is essential if you wanna make a 
good impression on people when you post what you know about certain subjects. 


/-/ Vocabulary /-/ 
- Do not misspell except certain exceptions: 


phone -> fone 


freak -> phreak 
- Never substitute ‘z's for 's's. (i.e. codez -> codes) 
- Never leave many characters after a post (i.e. Hey Dudes!#!@#@!#!@) 
- NEVER use the 'k' prefix (k-kool, k-rad, k-whatever) 
- Do not abbreviate. (I got lotsa wares w/ docs) 
- Never substitute '0' for 'o' (r@dent, lQzer). 
- Forget about ye old upper case, it looks ruggyish. 


ALL right, that was to relieve the tension of what is being drilled 
into your minds at the moment. Now, however, back to the teaching course. 
Here are somethings you should know about phones and billings for phones, 
etc. 


LATA: Local Access Transference Area. Some people who live in large 
cities or areas may be plagued by this problem. For instance, let's say you 
live in the 215 area code under the 542 prefix (Ambler, Fort Washington). If 
you went to dial in a basic Metro code from that area, for instance, 
351-0100, that might not be counted under unlimited local calling because it 
is out of your LATA. For some LATA's, you have to dial a '1' without the 
area code before you can dial the phone number. That could prove a hassle 
for us all if you didn't realize you would be billed for that sort of call. 
In that way, sometimes, it is better to be safe than sorry and phreak. 


The Caller Log: In ESS regions, for every household around, the phone 
company has something on you called a Caller Log. This shows every single 
number that you dialed, and things can be arranged so it showed every number 
that was calling to you. That's one main disadvantage of ESS, it is mostly 
computerized so a number scan could be done like that quite easily. Using a 
dialup is an easy way to screw that, and is something worth remembering. 
Anyways, with the caller log, they check up and see what you dialed. Hmm... 
you dialed 15 different 800 numbers that month. Soon they find that you are 
subscribed to none of those companies. But that is not the only thing. Most 
people would imagine "But wait! 800 numbers don't show up on my phone 
bill!". To those people, it is a nice thought, but 800 numbers are picked up 
on the caller log until right before they are sent off to you. So they can 
check right up on you before they send it away and can note the fact that 
you fucked up slightly and called one too many 800 lines. 


Right now, after all of that, you should have a pretty good idea of how 
to grow up as a good phreak. Follow these guidelines, don't show off, and 
don't take unnecessary risks when phreaking or hacking. 


(*Greets to Pee Wee for this file taken from his ‘Hell Disk' #1*) 
----------- ExoduS---------- 


